CVE-2024-20154

CVE-2024-20154: NB-IoT SIB1-NB Stack Overflow im MediaTek MT6769 Baseband Classification: CWE-121 — Stack-basierter Pufferüberlauf Severity: Kritisch MediaTek Bulletin · 8.8 Hoch, Angriffsvektor: Angrenzend CISA-ADP Type: Remote Code Execution — keine Benutzerinteraktion, keine vorherige Verbindu...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM erzeugt GPS-Basisband-Signaldatenströme, die mit Software Defined Radio SDR-Plattformen wie ADALM-Pluto, bladeRF, HackRF und USRP in HF umgewandelt werden können. Windows-Build-Anleitung 1. Starten Sie Visual Studio. 2. Erstellen Sie ein leeres Projekt für eine...

CVE-2023-40289

CVE-2023-40289 Este é um exploit para CVE-2023-40289, uma vulnerabilidade de injeção de comandos em vários Controladores de Gerenciamento de Placa BMC com firmware da ATEN. Exemplos de dispositivos afetados incluem AST2300 ou AST2500 da Aspeed, que podem ser encontrados em sistemas de servidor da...

FirmWire

root@kitploit: -. .-. | |+ \ \ / /+ .-. .- \ / \ | | | | '| ' \ // / | | '/ - / \ / '-' '-|| | || |||// | || |-' '-' FirmWire FirmWire è una piattaforma di analisi del firmware baseband a livello di sistema completo che supporta Samsung e MediaTek. Consente l'esecuzione di fuzzing, analisi...

ATFuzzer

ATFuzzer "Opening Pandora's Box through ATFuzzer: Dynamic Analysis of AT Interface for Android Smartphones" è stato accettato per la 35a Conferenza Annuale sulle Applicazioni di Sicurezza Informatica ACSAC 2019. https://syed-rafiul-hussain.github.io/wp-content/uploads/2019/11/atfuzz.pdf Sommario...

samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce

CVE-2025-54328 — Переполнение стека в SMS RP-DATA Samsung Exynos Концептуальный PoC для CVE-2025-54328, критическое переполнение стека CVSS 10.0 в парсере SMS RP-DATA прошивки базового модема Samsung Exynos. Статья Полное описание: Samsung Exynos: Переполнение стека SMS CVE-2025-54328 — Критическ...

libbtbb

libbtbb Dies ist die Bluetooth-Basisband-Decodierungsbibliothek, abgeleitet vom GR-Bluetooth-Projekt. Sie kann verwendet werden, um Bluetooth-Paket- und Piconetz-Informationen aus Ubertooth-Geräten sowie GR-Bluetooth/USRP zu extrahieren. Dieser Code ist unvollständig und befindet sich noch in...

esp32_bluetooth_classic_sniffer

BrakTooth Sniffer/Injetor BR/EDR Ativo para ESP32 Modo "monitor" simples para Bluetooth Classic. Capture ou injete pacotes Baseband BR/EDR em conexões BT do ESP32. Este é um sniffer BR/EDR ativo de engenharia reversa e um ESP32 patching framework, que pode ser usado para explorar a interação...

qualcomm_baseband_scripts

qualcommbasebandscripts Sammlung von Skripten zum Reverse Engineering der Qualcomm-Baseband-/Modem-Firmware Alle Offsets/Adressen in den Skripten wurden auf die Pixel-5-März-Firmware aktualisiert und müssen geändert werden, wenn du eine andere Version verwendest. Zusammenführen...

Poc

Exploit für Qualcomm-Basisband...

Exploit for Out-of-bounds Write in Mediatek Lr12A

CVE-2024-20154: NB-IoT SIB1-NB Stack Overflow in MediaTek MT67...

CVE-2026-50207

The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity...

CVE-2026-50207

The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity...

CVE-2026-50207

The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity...

CVE-2026-50207 Local Modem Manipulation via Binder Interfaces

The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity...

CVE-2026-50207

The CVE-2026-50207 issue involves the system Binder boundary that accepts unverified pass-through AT commands, enabling local applications to read baseband files or disable cellular connectivity. The vulnerability is described as local, with impact to confidentiality, integrity, and availability ...

CVE-2026-50207 Local Modem Manipulation via Binder Interfaces

The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity...

EUVD-2026-34219

The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity...

PT-2026-46159

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The system Binder boundary accepts unverified pass-through AT commands. This allows local applications to read baseband files or disable cellular connectivity...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability. This vulnerability stems from the system’s Binder boundary accepting unverified direct access AT commands, which may allow local applications to read baseban...